Privacy Policy

1. Who is responsible

Verquil is operated by Scorpeia (“Verquil”, “we”). We are the controller of the personal data described in this policy. Contact: hello@scorpeia.com.

2. What we collect

• Account data: your email address and a securely hashed password.
• Your files: the video or audio you upload, the audio we extract from it, and the transcripts we produce.
• AI output: the punctuation and the summaries we generate from your transcripts, stored alongside the original transcript rather than replacing it.
• Usage records: your credit ledger (reservations, settlements, refunds), job metadata such as file duration, language, status, and failure reasons.
• Custom vocabulary: the terms you add to improve accuracy.
• Technical logs: standard server logs (IP address, timestamps, requested pages) kept for security and troubleshooting.

We do not use advertising trackers or sell personal data.

3. How long we keep your audio and video

This is the heart of our privacy promise, so here it is precisely:

• Successful transcription: your source video and extracted audio are automatically deleted from our servers once transcription finishes.
• Failed transcription: the extracted audio is retained for up to 72 hours so the job can be retried without you re-uploading; after that it is deleted. If a retry succeeds, the audio is deleted immediately on completion.
• Transcripts: your transcripts stay in your account so you can review and export them, until you delete them or close your account.
• Staff access: our staff can access your transcript content only when strictly necessary to support you or investigate a problem, and every such access is recorded in an audit log. Those audit records are kept for up to 24 months and then deleted.

4. Who else processes your data

Verquil runs on a small number of providers that process data on our behalf. By category, they are:

• a speech-to-text provider, which receives the audio extracted from your files and returns the transcript;
• an AI provider, which receives transcript text when we add punctuation or write a summary;
• an email provider, which receives your email address and the contents of account email (verification links, password resets, service notices) — it never receives your recordings or your transcripts;
• a hosting provider, which runs the servers where your account, your transcripts, and your files while they are being processed live.

They process data only on our instructions, to provide their service. All of them process data in the United States; our servers are in Los Angeles. We name each provider, with what it does for us and where, on our subprocessors page. See our subprocessors

Transcription is performed by Deepgram, a speech-to-text provider audited for SOC 2 Type II and supporting HIPAA and GDPR compliance. To transcribe a file, we transmit the extracted audio to Deepgram over an encrypted connection.

• Training opt-out is enforced on every request: our system attaches the opt-out flag to each transcription request automatically — it is built into the only code path that can reach Deepgram, so it cannot be forgotten or disabled per request. Your audio is not used to train AI models.
• Deepgram does not retain your audio after processing: for opted-out requests, data is kept only as long as needed to complete the transcription.

Cross-border transfer: audio sent to Deepgram is processed on Deepgram servers located in the United States. It is deleted once processing completes and is not used to train AI models, as described above.

5. AI punctuation and summaries

Chinese transcripts come back from the transcription engine with little or no punctuation, so we add it; for any language, we can also write a short summary of what a recording covers. Both are produced by an AI provider, Anthropic, on servers located in the United States.

To do this we send the full text of your transcript to Anthropic — not an excerpt, and not anonymized. Your audio is never sent to Anthropic.

Summaries are written by software and can be wrong or incomplete. They are labelled as AI-generated wherever they appear, and the transcript itself is never rewritten by the AI: punctuation is stored separately and is checked character by character against the original words before we show it.

Anthropic's commercial terms state that it does not train its models on customer content, and its published policy states that API inputs and outputs are deleted within 30 days — longer for content its systems flag as violating its usage policy. So for up to 30 days, a copy of your transcript text exists on Anthropic's systems.

6. How we use your data

• To provide the service: transcribe your files, apply your vocabulary, meter credits, and deliver results.
• To operate your account: sign-in, verification email, password resets, and important service notices.
• To keep the service safe: security monitoring, abuse prevention, and troubleshooting.

We do not use the content of your recordings or transcripts for marketing, profiling, or training.

7. Cookies

We use only the cookies needed to run the service: a session cookie to keep you signed in, a security (CSRF) cookie, and a language preference cookie. No advertising or third-party analytics cookies.

8. Security

Data is encrypted in transit (HTTPS/TLS), both between you and Verquil and between Verquil and the providers on our subprocessors page. Passwords are stored as salted hashes, never in plain text. Access to production systems is restricted, and deletion of source media after a successful transcription is automatic.

9. Your rights

You can access and export your transcripts from your account at any time, delete individual transcripts, and close your account from Settings. Deleting a transcript removes its text and the source media from our servers; closing your account does that for everything in it, anonymises your account, and signs you out. Records of credit purchases and usage are kept because we are required to keep billing records, and are no longer linked to your email. Depending on where you live, you may also have legal rights to access, correct, delete, or receive a copy of your personal data, and to object to or restrict certain processing. To exercise them, contact us and we will respond within the timelines required by applicable law.

10. Changes to this policy

If we change this policy in a way that matters — especially anything affecting the retention promises above — we will notify you before the change takes effect, and files you have already uploaded stay under the deletion rules that applied when you uploaded them.

11. Contact

Privacy questions or requests: hello@scorpeia.com.